Benign javascript Download

clob.api 2.73.0

Script discovers public IP and POSTs to hardcoded external endpointPublic Explr remote control server
SHA-256a1fbb9e9c78613474feea2f0e15e17165154c4aa11ed0b2e7b3d17f68cfdcaa3
URLhttps://registry.npmjs.org/clob.api/-/clob.api-2.73.0.tgz
MaleculeK(Li)O₄(S₄C₄Er₂P₄)H₁₀(Cm₂₄CrDb₁₄DsF₁₂Hf₂Os₁₅Po₁₅Ti₂U₈)Md₄(Bi₂InPa₃)

Also flagged by osv (MAL-2026-4349: Malicious code in clob.api (npm)) +1 more.

Evidence

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.